Commit graph

7839 commits

Author SHA1 Message Date
Mark Andrews
8ed6c49f1a 4653. [bug] Reorder includes to move @DST_OPENSSL_INC@ and
@ISC_OPENSSL_INC@ after shipped include directories.
                        [RT #45581]

(cherry picked from commit 124712666e)
2017-07-20 11:52:29 +10:00
Tinderbox User
ab8823e535 update copyright notice / whitespace 2017-07-19 23:45:44 +00:00
Mark Andrews
447dfe4f11 4653. [bug] Reorder includes in bin/nsupdate/Makefile.in.
[RT #45581]

(cherry picked from commit a5a4cf96c6)
2017-07-20 09:38:01 +10:00
Mark Andrews
a60831febf 4651. [bug] Nsupdate could attempt to use a zeroed address on
server timeout. [RT #45417]

(cherry picked from commit dac36869f3)
2017-07-19 15:36:55 +10:00
Mark Andrews
6b56350522 4651. [bug] Nsupdate could attempt to use a zeroed address on
server timeout. [RT #45417]

(cherry picked from commit 38edf586f9)
2017-07-19 15:36:55 +10:00
Mark Andrews
f7d148398c 4649. [bug] The wrong zone was logged when a catalog zone is added.
[RT #45520]

(cherry picked from commit abe5cf42b3)
2017-07-10 10:37:25 +10:00
Mark Andrews
3a84275b10 4648. [bug] "rndc reconfig" on a slave no longer causes all member
zones of configured catalog zones to be removed from
                        configuration. [RT #45310]

(cherry picked from commit 1e9b39fe26)
2017-07-10 09:07:29 +10:00
Ray Bellis
0359dfcf63 fixed new warning with previous iOS patch
(cherry picked from commit 70676a01eb)
2017-07-04 12:12:41 +01:00
Ray Bellis
4f1073e7b2 fix warnings from iOS build of dig
(cherry picked from commit 03a4e4381e)
2017-07-04 11:54:54 +01:00
Mark Andrews
250d96dd31 loop waiting for ns4/managed-keys.bind to be written
(cherry picked from commit f7a22ae512)
2017-07-04 15:53:45 +10:00
Tinderbox User
02e1a5b3ae update copyright notice / whitespace 2017-06-30 23:46:05 +00:00
Evan Hunt
28061f80b6 [v9_11] fix RSA parsing when md5 disabled
4645.	[bug]		Fix PKCS#11 RSA parsing when MD5 is disabled.
			[RT #45300]

(cherry picked from commit b05b3fab3c)
2017-06-29 15:54:35 -07:00
Tinderbox User
710a238dfe update copyright notice / whitespace 2017-06-27 23:46:13 +00:00
Evan Hunt
d315545e6d [v9_11] enhanced rfc 5011 logging
4642.	[cleanup]	Add more logging of RFC 5011 events affecting the
			status of managed keys: newly observed keys,
			deletion of revoked keys, etc. [RT #45354]

(cherry picked from commit 0d90835d2a)
2017-06-27 10:50:29 -07:00
Mark Andrews
b2e7185306 4640. [bug] If query_findversion failed in query_getdb due to
memory failure the error status was incorrectly
                        discarded. [RT #45331]

(cherry picked from commit b551ee14bd)
2017-06-23 17:18:23 +10:00
Tinderbox User
6431922cb2 update copyright notice / whitespace 2017-06-13 23:46:02 +00:00
Evan Hunt
503809a8e1 [v9_11] put in a missing #ifdef section
(cherry picked from commit 19a72397da)
2017-06-13 14:51:09 -07:00
Evan Hunt
214b53880b [v9_11] prevent reload failure due to LMDB database perms
4638.	[bug]		Reloading or reconfiguring named could fail on
			some platforms when LMDB was in use. [RT #45203]

(cherry picked from commit bf05e66bb3)
2017-06-13 12:01:29 -07:00
Mark Andrews
dd5375de0a 4636. [bug] Normalize rpz policy zone names when checking for
existence. [RT #45358]

(cherry picked from commit e85e95c19e)
2017-06-13 13:07:23 +10:00
Mukund Sivaraman
3a58e1fefb Don't log NSDNAME failures as NSIP (#45052)
(cherry picked from commit 2c11da8441)
2017-06-12 14:11:32 +05:30
Tinderbox User
8664a1bd40 update copyright notice / whitespace 2017-05-30 23:46:05 +00:00
Evan Hunt
c28e44f3f8 [v9_11] quote service registry paths
4532.	[security]	The BIND installer on Windows used an unquoted
                        service path, which can enable privilege escalation.
			(CVE-2017-3141) [RT #45229]

(cherry picked from commit 967a3b9419)
2017-05-30 13:38:22 -07:00
Evan Hunt
3440cf9c60 [v9_11] fix rpz formerr loop
4531.	[security]	Some RPZ configurations could go into an infinite
			query loop when encountering responses with TTL=0.
			(CVE-2017-3140) [RT #45181]
2017-05-30 12:35:06 -07:00
Mark Andrews
9270a14461 4530. [bug] "dyndb" is dependent on dlopen existing / being
enabled. [RT #45291]

(cherry picked from commit aa3a8979bc)
2017-05-30 11:35:05 +10:00
Mark Andrews
032d2134a4 4629. [bug] dns_client_startupdate could not be called with a
running client. [RT #45277]

(cherry picked from commit e51d62ecae)
2017-05-30 09:52:45 +10:00
Tinderbox User
29656aa09c update copyright notice / whitespace 2017-05-28 23:46:19 +00:00
Evan Hunt
fb9ef31fed [v9_11] Add DLZ db version to activeversions
4628.	[bug]		Fixed a potential reference leak in query_getdb().
			[RT #45247]

(cherry picked from commit 594eadcc34)
2017-05-28 14:29:58 -07:00
Evan Hunt
ab44851860 [v9_11] Use 127.0.0.1 as interface for rndc in logfileconfig test 2017-05-28 14:23:32 -07:00
Mark Andrews
62323c1ba2 test crypto support
(cherry picked from commit 0a78894304)
2017-05-26 16:04:18 +10:00
Tinderbox User
2c893f16d8 update copyright notice / whitespace 2017-05-24 23:45:56 +00:00
Mark Andrews
5228a39457 make chain system test work with python 3
(cherry picked from commit b9c5b37e0c)
2017-05-24 21:45:16 +10:00
Mark Andrews
6f1632aedf use 'python -u' to run python scripts
(cherry picked from commit a5dc0d5066)
2017-05-24 15:16:41 +10:00
Evan Hunt
d786bb0f8b [v9_11] copyrights 2017-05-23 16:44:42 -07:00
Evan Hunt
823ccd1f02 [v9_11] add chain ordering tests
4626.	[test]		Added more tests for handling of different record
			ordering in CNAME and DNAME responses. [QA #430]
2017-05-22 17:09:31 -07:00
Tinderbox User
abe69df9a7 regen v9_11 2017-05-17 01:17:01 +00:00
Tinderbox User
4745777284 update copyright notice / whitespace 2017-05-16 23:45:57 +00:00
Evan Hunt
403e7b4512 [v9_11] symbolic option names for dig +ednsopt
4555.	[func]		dig +ednsopt: EDNS options can now be specified by
			name in addition to numeric value. [RT #44461]

(cherry picked from commit 25a9b90369)
2017-05-16 10:08:17 -07:00
Evan Hunt
b6fa637fc8 [v9_11] don't keep an LMDB transaction open across an exclusive section
4625.	[bug]		Running "rndc addzone" and "rndc delzone" at close
			to the same time could trigger a deadlock if using
			LMDB. [RT #45209]

(cherry picked from commit 03a7a952c0)
2017-05-16 08:48:21 -07:00
Mark Andrews
59d940391c 4622. [bug] Remove unnecessary escaping of semicolon in CAA and
URI records. [RT #45216]

(cherry picked from commit 1611ceb8b2)
2017-05-11 10:58:03 +10:00
Mark Andrews
c935952ede 4619. [bug] Call isc_mem_put instead of isc_mem_free in
bin/named/server.c:setup_newzones. [RT #45202]

(cherry picked from commit 0c18eb4783)
2017-05-10 11:11:09 +10:00
Mark Andrews
638068f7e7 be consistent with master 2017-05-09 11:27:07 +10:00
Tinderbox User
4cf9718549 update copyright notice / whitespace 2017-05-08 23:46:00 +00:00
Mark Andrews
da5b569ddb 4617. [test] Update rndc system test to be more delay tolerant.
[RT #45177]

(cherry picked from commit 31f4fb98e2)
2017-05-09 04:10:49 +10:00
Tinderbox User
14f4347139 update copyright notice / whitespace 2017-05-04 23:46:00 +00:00
Evan Hunt
c83a306155 [v9_11] fix lmdb delzone
4616.	[bug]		When using LMDB, zones deleted using "rndc delzone"
			were not correctly removed from the new-zone
			database. [RT #45185]

(cherry picked from commit 3a554a444c)
2017-05-04 12:32:47 -07:00
Tinderbox User
c88b4680d9 update copyright notice / whitespace 2017-05-02 23:46:05 +00:00
Mark Andrews
ac9072210c 4615. [bug] AD could be set on truncated answer with no records
present in the answer and authority sections.
                        [RT #45140]

(cherry picked from commit 33e94f501f)
2017-05-03 07:52:02 +10:00
Mark Andrews
0b18154e45 remove unused assignments [RT #45147]
(cherry picked from commit 78551a3f2c)
2017-05-03 07:46:21 +10:00
Tinderbox User
af0d9b7705 update copyright notice / whitespace 2017-04-26 23:46:00 +00:00
Tinderbox User
0fc4b96b2b regen v9_11 2017-04-26 23:29:27 +00:00